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Description 

[0001] The present invention relates to a seif -serv- 
ice business system. 

[0002] Frauduient use of self-service business sys- s 
tems such as automated teller machine (ATM) systems 
has become a substantial problem for banks and other 
financial institutions. Customer complaints have been 
received that "phantom withdrawals" have been made 
from their accounts by persons passing themselves off to 
as the customers. 

[0003] In an attempt to reduce the likelihood of 
fraud occurring, it is known to use biometrics for confir- 
mation of user identity in a self-service system. Biomet- 
rics relates to the analysis of biological observations is 
and phenomena. More particularly, in the present con- 
text, it relates to the measurement and evaluation of 
certain physical characteristics which vary from person 
to person. Biometric identification systems have been 
developed and are in use today. The publication "Elec- 20 
tronic Banking 1", published by "POST-NEWS", Stoke- 
sub-Hamdon, Somerset TA14 6BR England, discusses 
the use of biometrics in connection with electronic bank- 
ing and identifies five types of biometric identification: 
signature verification, hand geometry, finger and palm 2s 
print comparison, voiceprint measurement and retinal 
or iris eye scanning. A sixth type, vein patterns, is iden- 
tified as having recently been designed. When a bio- 
metric assessment is made, a value is calculated for 
each user. This value is compared with a predefined ref- 30 
erence value to decide whether to accept or reject a 
user. The use of biometrics to confirm the identity of a 
user is not always completely accurate. Because of the 
limitations of the technique, there is always a false 
acceptance rate and a false reject rate. Even though 36 
these rates usually lie within the range of 0.1% and 3%, 
depending upon the biometric used, this can still be 
unacceptable for banks. 

[0004] GB-A-2,237,670 discloses a system for the 
transfer of value for use in a situation where a user 40 
wishes to receive the services or goods from a supplier 
in return for an appropriate transfer of funds or a com- 
mitment to recognize the value of the services/goods 
supplied. This system comprises a user interface unit 
having user identification input means, biometric means 45 
for producing biometric output data relating to a user, 
storage means for storing biometric reference data 
relating to an authorised of the system and is also 
arranged such that data relating to previous transac- 
tions initiated by the authorised user can be stored so so 
that the likely type of transaction to be requested by a 
given user can be protected having regard to the past 
request history of that user. 

[0005] Accordingly, it is an object of the present 
invention to provide a self-service system having an 55 
improved capability of detecting attempted fraud. 
[0006] According to the invention there is provided 
a self-service system including a user interface unit hav- 



ing user identification means, input means operable by 
a user for initiating a selected self-service transaction, 
biometric means for producing biometric output data 
relating to a user, storage means for storing biometric 
reference data relating to a plurality of authorised users 
of the system and arranged to store data relating to pre- 
vious transactions initiated by said authorised users, 
prediction means coupled to said identification means 
and arranged to predict the type of transaction to be 
requested by a given user on the basis of the stored 
data relating to previous transactions, transaction 
authorisation means coupled to said biometric means 
and to said prediction means and arranged to make a 
determination as to whether a transaction initiated by a 
user is to be permitted to proceed to completion, char- 
acterized in that said determination is made on the 
basis that if said biometric cutout data does not conclu- 
sively match said biometric reference data but matches 
said reference data within a predetermined limit of dis- 
crepancy the comparison between the predicted and 
requested transaction is used in determining whether 
the transaction is permitted to proceed to completion, 
and by the system including further storage means 
arranged to store a suspicion count for each of said 
authorised users, each suspicion count being arranged 
to be incremented by one each time said biometric out- 
put data for the relevant user is not a conclusive match 
with said biometric reference data for that user and 
regardless of the result of the comparison between the 
predicted and requested transaction, and said transac- 
tion authorisation mens being arranged to terminate a 
transaction if said suspicion count reaches a predeter- 
mined threshold value. 

[0007] It should be understood that, in a self-serv- 
ice system in accordance with the present invention, if a 
biometric test is not conclusive, use of the prediction 
means can be helpful in resolving the identity of the 
user. The prediction means involves the use of a predic- 
tion to determine whether or not a proposed transaction 
is consistent with the user's normal behaviour in decid- 
ing whether to permit the transaction to proceed. A 
record of past transactions for each user is maintained 
and stored in a memory in the system. When a user 
commences a transaction, the system can predict what 
type of transaction the user is likely to request In the 
case in which the biometric evaluation is questionable, 
the added information with respect to whether the type 
of transaction selected by the user is consistent with 
past actions can tip the scales for or against user 
acceptance. 

[0008] Another factor which can be employed in 
determining whether a requested transaction may pro- 
ceed to completion is a suspicion count, if a predeter- 
mined number of consecutive suspicious transactions 
involving a particular user have taken place, this can be 
determinative of user rejection in close cases. A suspi- 
cion count for each user is maintained in memory and is 
incremented for each suspicious transaction. The count 
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is decremented to a start value (e.g. zero) whenever a 
non -suspicious transaction involving that user takes 
place. 

[0009] One embodiment of the invention will now be 
described by way of example with reference to the s 
accompanying drawings, in which :- 

Fig. 1 is a block diagram of a self-service system in 
accordance with the invention incorporating a plu- 
rality of ATMs; 10 
Fig. 2 is a schematic diagram of one of the ATMs of 
Fig. 1; and 

Fig. 3 is a flow diagram illustrating the operation of 
the transaction authorisation means of the system. 

15 

[0010] Referring to Figs. 1 and 2, the self-service 
business system shown therein includes a plurality of 
ATMs 10 connected in conventional manner to a host 
computer 12. As shown in Fig. 2, each ATM 10 includes 
a conventional user interface unit or fascia 14 incorpo- 20 
rating key operated input means 16 for enabling a user 
of the ATM 1 0 to enter, if required, a personal identifica- 
tion number (PIN) and to select desired services pro- 
vided by the ATM 10, a lead-through display screen 18 
for indicating to the user the options available to htm in 2s 
carrying out a transaction on the ATM 10 and for indicat- 
ing the keys of the input means 16 which require to be 
operated in order to select a desired service or services, 
and a card reader 20 for reading account information 
contained on an identification card which the user 30 
inserts in operation into a slot (not shown) forming part 
of the card reader 20 whereby the user can be identi- 
fied. Other conventional modules included in each ATM 
10 include a cash dispenser 22 for counting and pre- 
senting currency notes to a user, a receipt printer 24 for 35 
printing receipts to be presented to a user when a 
deposit or cash withdrawal is made using the ATM 10 
and for printing a mini-statement or balance of account 
statement when requested by a user, a journal printer 
26 for printing a record of transactions carried out by the 40 
ATM 10, a depository 28 for receiving envelopes con- 
taining cash and/or cheques deposited by a user, envi- 
ronmental data source means 30 for providing data as 
to the time and date of a transaction together with the 
location of the ATM 10, processing means 32 for con- 45 
trolling the operations of the various elements of the 
ATM 10, and a communications module 34 for coupling 
the ATM 10 to the host computer 12. 
[001 1 ] The host computer 1 2 includes a user refer- 
ence file 36 which includes records of the types of trans- so 
actions performed by authorised users in previous uses 
of the system which includes the various ATMs 10, envi- 
ronmental data relating to these transactions, and bio- 
metric reference data for each authorised user. 
[0012] Also included in each ATM 10 is a predictive ss 
system 38 which is arranged to use the information con- 
tained in the user reference file 36 for a particular user 
to ascertain what service or services have been 



requested most frequently by that user at particular 
times, dates and locations in the past, and therefore 
what service or services are most likely to be requested 
by that user when he next initiates a transaction by 
inserting his identification card into the card reader 20 of 
one of the ATMs 10. The processing means 32 of each 
ATM 1 0 acts in dependence on the output of the predic- 
tive system 38 to cause the ATM 10 to perform certain 
operations at certain times and in certain sequences in 
order to cause the ATM 10 to complete a transaction 
with greater overall speed, and to simplify the decisions 
and selections which need to be made by the user, if the 
service or services actually requested is or are the 
same as the service, or at least some of the services, 
which have been predicted. Thus, the processing 
means 32 causes a particular menu to be displayed on 
the lead-through display screen 1 8 following initiation of 
a transaction by a user and following a prediction that 
particular services are likely to be requested by the 
user. For example, a simplified menu could be displayed 
consisting of only four questions, such as: "Do you 
. require £20?", "Do you require £30?*, "Do you require a 
mini-statement?", and "Do you require some other 
transaction?". Also, immediately following the initiation 
of a transaction, the ATM 10 could obtain system 
authorization for, and count out ready for presenting to 
the owner, a predicted amount of cash in advance of an 
anticipated withdrawal request If, for example, a with- 
drawal request is predicted to be either £20 or £30, then 
£20 will be counted out since, if £30 is actually 
requested, a further $10 can readily be counted and 
added to the already counted amount. 
[0013] Also included in the user interface unit 14 of 
each ATM 10 is a biometric means 40 which receives 
one or more biometric inputs from a user who is 
addressing the ATM 10. As has previously been set 
forth, the biometric information required may include 
one or more of several types, such as, for example, sig- 
nature verification, hand geometry, finger and palm print 
comparison, voiceprint measurement, retinal or iris eye 
scanning or vein pattern determination. The particular 
input apparatus will vary in accordance with the particu- 
lar biometric employed. For example, for voiceprint 
measurement, a microphone would customarily be 
used; for signature verification, a pressure-sensitive 
writing platform might be employed; for hand geometry, 
a platform on which the customer's hand is placed and 
sensed could be used, etc. Output data from the bio- 
metric means 40 is compared with the biometric refer- 
ence data on file in the user reference file 36. As a result 
of this comparison, a first value is derived representa- 
tive of the difference between the output data and the 
reference data. The output data is considered to be a 
conclusive match with the reference data if the first 
value is less than a predetermined threshold value. 
[0014] included in storage in a memory unit 42 of 
the host computer 12 is a suspicion count. This is a 
count of the number of consecutive suspicious transac- 



3 



5 



EP 0 652 540 B1 



6 



tions performed by a user. A suspicious transaction is 
one in which output data from the biometric means 40 
fails to match conclusively the reference biometric data 
for the relevant user but lies within a predetermined limit 
of discrepancy. Each time that a suspicious transaction 5 
takes place, the total of the suspicion count is incre- 
mented by one. On the other hand, when a non-suspi- 
cious transaction is completed by a user, the suspicion 
count is decremented to zero. A suspicion count thresh- 
old number, either for a particular user or for al! users, w 
may be determined and stored in the host computer 12, 
for example in the user reference file 36. 
[0015] Also included in each ATM 10 is a transac- 
tion authorisation module 44, which is a software mod- 
ule that is integrated into the processing means 32 is 
which controls the operation of the ATM 10, the module 
44 serving to authorise a transaction selected by a user. 
The inputs to the transaction authorisation module 44 
are as follows: the predicted transaction; the actual 
requested transaction; the biometric value for the user; 20 
the biometric reference value; and any previously 
recorded suspicion count. The outputs from the transac- 
tion authorisation module 44 are: OK, meaning that the 
identity of the user has been confirmed and that the 
user can proceed with the transaction; failed, meaning 25 
that the biometric test has not confirmed the identity of 
the user as read from his identification card, thereby 
implying that an attempted fraud is taking place; and 
suspicious, meaning that the module 44 cannot be 
1 00% sure either way. In the last instance, the suspicion 30 
count in the memory unit 42 is incremented by one, so 
that the system is aware of a possible attempted fraud. 
It should be understood that if the suspicion count 
reaches a predetermined threshold value (typically 3) 
then the module 44 terminates the transaction. 35 
[0016] The operation of the self-service system, 
particularly as regards the transaction authorisation 
process, will now be described with reference to Fig. 3. 
A transaction is initiated (block 50) by a user inserting 
his identification card into the card reader 20 of one of 40 
the ATMs 10. After a transaction is initiated, a biometric 
check of the user is made (block 52), and simultane- 
ously a prediction is made (block 54) as to the service or 
services that will probably be requested by the user. At 
the same time, a suspicion count, if there is one for that 45 
user, is forwarded by a path 56 to the transaction 
authorisation module 44. The user then makes an 
actual transaction selection (block 58). All of the infor- 
mation from these actions is input to the module 44, as 
represented by a biometric reference path 60, a biomet- so 
ric value path 62, the suspicion count path 56, a pre- 
dicted transaction path 64 and an actual transaction 
path 66. The module 44 then processes ail of this infor- 
mation and provides a decision. The various alterna- 
tives are represented in Fig. 3 by . paths 68, 70 and 72, ss 
shown as outputs from the module 44, which lead to 
blocks 74, 76 and 78, respectively. 
[0017] It should be understood that if the biometric 



value is a conclusive match with the reference value 
then the transaction continues (block 76) regardless of 
whether the actual transaction is as predicted. 
[0018] Also, if the biometric value dearly fails, then 
the transaction is found not to be valid by the module 44 
regardless of whether the actual transaction is as pre- 
dicted. In this case the transaction is terminated (block 
78) and the suspicion count is incremented. Another 
option in the case of an invalid transaction is to arrange 
for the relevant ATM 10 to capture the user's identifica- 
tion card. 

[001 9] If the biometric value is close to the biometric 
reference value (i.e. is not a conclusive match but 
matches the reference value within a predetermined 
limit of discrepancy) and the actual transaction is as 
predicted, then the module 44 increments the suspicion 
count and permits the transaction to proceed to comple- 
tion provided that the suspicion count has not reached 
the threshold value, if the biometric value is close to the 
reference value but the actual transaction is not as pre- 
dicted, the suspicion count is incremented and appro- 
priate further action is taken (block 74) to handle a 
suspicious transaction, again provided that the suspi- 
cion count has not reached the threshold value. This 
further action may involve repeating the biometric 
check, making a different biometric check or requiring 
the user to enter his PIN on the ATM input means 16. If 
the further biometric check is conclusive or the entered 
PIN is correct then the transaction is allowed to pro- 
ceed. On the other hand, if the further biometric check 
is not conclusive or the PIN is incorrect then the trans- 
action is terminated. 

[0020] In an alternative embodiment of a self-serv- 
ice system in accordance with the invention, instead of 
storing a user reference file in the host computer 12, a 
data base containing a record of a user's previous trans- 
actions and biometric reference data could be stored in 
the identification card for that user, this data being read 
out at the same time as the identification data for the 
user. Also, the suspicion count for the user could be 
stored in the identification card. 

Claims 

1 . A self-service system including a user interface unit 
(14) having user identification means (20), input 
means (16) operable by a user for initiating a 
selected self-service transaction, biometric means 
(40) for producing biometric output data relating to 
a user, storage means (36) for storing biometric ref- 
erence data relating to a plurality of authorised 
users of the system and arranged to store data 
relating to previous transactions initiated by said 
authorised users, prediction means (38) coupled to 
said identification means (20) and arranged to pre- 
dict the type of transaction to be requested by a 
given user on the basis of the stored data relating to 
previous transactions, transaction authorisation 



4 



7 



EP 0 852 540 B1 



8 



means (44) coupled to said biometric means (40) 
and to said prediction means (38) and arranged to 
make a determination as to whether a transaction 
initiated by a user is to be permitted to proceed to 
completion, characterized in that said determine- s 
tion is made on the basis that if said biometric out- 
put data does not conclusively match said biometric 
reference data but matches said reference data 
within a predetermined limit of discrepancy the 
comparison between the predicted and requested i 0 
transaction is used in determining whether the 
transaction is permitted to proceed to completion, 
and by the system including further storage means 
(42) arranged to store a suspicion count for each of 
said authorised users, each suspicion count being 75 
arranged to be incremented by one each time said 
biometric output data for the relevant user is not a 
conclusive match with said biometric reference 
data for that user and regardless of the result of the 
comparison between the predicted and requested 20 
transaction, and said transaction authorisation 
mens (44) being arranged to terminate a transac- 
tion if said suspicion count reaches a predeter- 
mined threshold value. 

25 

2. A system according to Claim 1, characterized in 
that said transaction authorisation means (44) is 
arranged to allow a transaction to proceed if said 
biometric output data conclusively matches said 
biometric reference data, regardless of the compar- 30 
ison between the predicted and requested transac- 
tion. 

3. A system according to Claim 2, characterized in 
that a first value is derived representative of the dif- 35 
ference between said biometric output data and 
said biometric reference data, said output data 
being considered to be a conclusive match with 
said reference data if said first value is less than a 
predetermined threshold value. 40 

4. A system according to either Claim 2 or Claim 3, 
characterized in that, if said biometric output data 
does not conclusively match said biometric refer- 
ence data but does match said reference data 45 
within said predetermined limit, and said requested 
transaction is not consistent with said predicted 
transaction, said transaction authorisation means 
(44) is arranged to cause said system to obtain 
additional information concerning the relevant user so 
before a final determination is made as to whether 
the transaction is permitted to proceed to comple- 
tion. 

5. A system according to Claim 4, characterized in 55 
that in the course of a transaction a further use is 
made of said biometric means (40) to provide said 
additional information. 



6. A system according to Claim 4, characterized in 
that in the course of a transaction the user enters a 
personal identification number by means of said 
input means (1 6) to provide said additional informa- 
tion. 

7. A system according to any one of the preceding 
claims, characterized in that said user identification 
means (20) is formed by a card reader for reading 
from a card account information relating to a user. 

8. A system according to any one of the preceding 
claims, characterized in that the stored data relating 
to previous transactions is updated each time a 
transaction is initiated by one of said authorised 
users. 

9. A system according to any one of the preceding 
claims, characterized by a host computer (12) and a 
plurality of automated teller machines (10) each 
including a user interface unit (14), prediction, 
means (38) and authorisation means (44) as spec- 
ified in Claim 1. 

Patentanspruche 

1. Ein Selbstbedienungssystem mit einer Benutzer- 
Interface-Einheit (14), mit einer Benutzer-ldentifi- 
zierungs-Einrichtung (20), einer Eingabeeinheit 
(16), die von einem Benutzer zur Einleitung einer 
ausgewahlten Selbstbedienungstransaktion beta- 
tigbar ist, einer biometrischen Einrichtung (40) zur 
Erzeugung von benutzerbezogenen biometrischen 
Ausgangsdaten, einer Speichereinrichtung (35) zur 
Speicherung biometrischer Referenzdaten bezug- 
lich einer Mehrzahl autorisierter Benutzer des 
Systems und Speicherung von Daten bezuglich frD- 
herer Transaktionen, welche von den autorisierten 
Benutzem eingeleitet wurden, einer mit der Identrfi- 
zierungseinrichtung (20) gekoppelten Vorhersage- 
Einriehtung (38) zur Vorhersage der von einem 
bestimmten Benutzer angeforderten Transaktions- 
art auf Grundiage gespeicherter Daten uber 
zuruckliegende Transaktionen, einer mit der biome- 
trischen Einrichtung (40) und der Vorhersage-Ein- 
richtung (38) gekoppelten Transaktions- 
Autorisierungseinrichtung (44), welche eine Ent- 
scheidung darOber trifft, ob eine von einem Benut- 
zer etngeieitete Transaktion zu Ende gefuhrt 
werden darf, dadurch gekennzeichnet. da3 diese 
Bestimmung auf der Grundiage erfolgt, daB im 
Falle einer nichtschlussigen Ubereinstimmung der 
biometrischen Ausgangsdaten mit den biometri- 
schen Referenzdaten, jedoch eine Ubereinstim- 
mung mit den Referenzdaten innerhalb einer 
vorbestimmten Diskrepanzgrenze der Vergleich 
zwischen der vorhergesagten und der angeforder- 
ten Transaktion benutzt wird T um zu bestimmen, ob 
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die Transaktion fertig durchgefuhrt werden darf, 
und daB das System weiterhin eine Speicheranord- 
nung (42) enthalt, um fur jeden der autorisierten 
Benutzer einen Verdachtszahiwert zu speichern, 
welcher jedesmal um 1 erhdht wird, wenn die bio- 5 
metrischen Ausgangsdaten des betreffenden 
Benutzers nicht schlussig mit den biometrischen 
Referenzdaten fur diesen Benutzer ubereinstim- 
men, und zwar unabhangig vom Ergebnis des Ver- 
gleichs zwischen der vorhergesagten und der 10 
angeforderten Transaktion, und daB die Transakt- 
ions-Autorisierungseinrichtung (4-4) die Transaktion 
abbricht, wenn der Verdachtszahiwert einen vorbe- 
stimmten Schweliwert ubersteigt. 

15 

2. System nach Anspruch 1, dadurch gekenn- 
zeich.net, da8 die Transaktions-Autorisierungsein- 
richtung (44) unabhangig vom Vergieich zwischen 
vorhergesagter und angeforderter Transaktion eine 
Fortsetzung der Transaktion erlaubt, wenn die bio- 20 
metrischen Ausgangsdaten schlussig mit den bio- 
metrischen Referenzdaten ubereinstimmen, 

3. System nach Anspruch 2, dadurch gekenn- 
zeichnet, daG ein erster Wert abgeleitet wird, der 25 
die Differenz zwischen den biometrischen Aus- 
gangsdaten und den biometrischen Referenzdaten 
darstelit, und daG die Ausgangsdaten ais schlussig 
ubereinstimmend mit den Referenzdaten angese- 
hen werden, wenn der erste Wert kleiner a!s ein 30 
vorbestimmter Schweliwert ist. 

4. System nach Anspruch 2 oder 3, dadurch gekenn- 
zeichnet, daG dann, wenn die biometrischen Aus- 
gangsdaten nicht schlussig mit den biometrischen 35 
Referenzdaten ubereinstimmen, jedoch eine Uber- 
einstimmung mit den Referenzdaten innerhalb 
einer vorbestimmten Grenze vodiegl und wenn die 
angeforderte Transaktion nicht konsisterrt mit der 
vorhergesagten Transaktion ist, die Transaktions- 40 
Autorisierungseinrichtung (44) derart ausgebildet 

ist, daG sie dem System eine zusatziiche informa- 
tion bezuglich des betreffenden Benutzers zukom- 
men laGt ehe eine endguttige Entscheidung 
daruber getroffen wird, ob die Fortsetzung der 45 
Transaktion erlaubt wird. 

5. System nach Anspruch 4, dadurch gekenn- 
zeichnet, da (3 im Verlauf einer Transaktion die bio- 
metrische Einrichtung (40) zur Lieferung 50 
zusatzlicher Information dient. 

6. System nach Anspruch 4, dadurch gekenn- 
zeichnet, daG im Verlauf einer Transkation der 
Benutzer uber die Eingabeeinrichtung (16) eine ss 
personliche Identifikationsnummer zur Lieferung 
der zusatziichen Information eingtbt 



7. System nach einem der vorstehenden Anspruche, 
dadurch gekennzeichnet, daG die Benutzer- Iden- 
tifizierungseinrichtung (20) durch einen Kartenieser 
gebildet wird, der von einer Karte eine benutzerbe- 
zogene Kontoinformation abliest. 

8. System nach einem der vorstehenden Anspruche, 
dadurch gekennzeichnet, daG die gespeicherten 
Daten bezuglich zuruckliegender Transaktionen 
jedesmal aktualisiert werden, wenn eine Transak- 
tion von einem der autorisierten Benutzer eingelei- 
tetwird. 

9. System nach einem der vorstehenden Anspruche, 
gekennzeichnet durch einen Host-Computer (1 2) 
und eine Mehrzahl von Bankautomaten (10), deren 
jeder eine Benuizer-lnterface-Einheit (14), eine 
Vorhersage-Einrichtung (38) und eine Autorisie- 
rungseinrichtung (44) gemaG Anspruch 1 enthalt. 

Revendications 

1. Un systeme libre-service comportant une unite 
interface utiiisateur (14) ayant un moyen d'identifi- 
cation utiiisateur (20), un moyen d' entree (16) ope- 
rable par un utiiisateur pour deciencher une 
transaction libre-service selectionnee, un moyen 
biometrique (40) pour produire des donnees de 
sortie biometriques relatives a un utiiisateur, un 
moyen de memorisation (36) pour memoriser des 
donnees de reference biometnques relatives a une 
pluralite d'uttlisateurs autorises du systeme et 
arrange pour memoriser des donnees relatives a 
des transactions anterieures declenchees par les- 
dits utilisateurs autorises, un moyen de prediction 
(38) accouple audit moyen d 'identification (20) et 
arrange pour predire ie type de transaction suscep- 
tible d'etre demande par un utiiisateur donne sur les 
bases des donnees memorisees relatives a des 
transactions anterieures, un moyen d'autprisation 
des transactions (44) accoupie audit moyen biome- 
trique (40) et audit moyen de prediction (38) et 
arrange pour determiner si Ton doit permettre a une 
transaction declenchee par un utiiisateur d'etre 
menee k bien, caracterise en ce que ladite determi- 
nation est faite en partant du principe que si lesdi- 
tes donnees de sortie biometriques ne 
correspondent pas de facon concluante auxdites 
donnees de reference biometriques mais corres- 
pondent auxdites donnees de reference dans une 
limite d'ecart predeterrninee, la comparaison entre 
la transaction predite et ia transaction demandee 
est utilisee pour determiner si Ton permet a la tran- 
saction d'etre menee a bien, et par le systeme com- 
portant un autre moyen de memorisation (42) 
arrange pour memoriser un compte des transac- 
tions suspectes pour chacun desdits utilisateurs 
autorises, chaque compte des transactions suspec- 
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tes etant arrange pour §tre increments d'un a cha- 
que fois que lesdites donn£es de sortie 
biometriques pour r utilisateur approprie ne sont 
pas une correspondance concluante avec lesdites 
donnees de reference biometriques pour cet utilisa- s 
teur et quel que soit ie resuftat de la comparaison 
entre la transaction predite et ia transaction deman- 
dee, et ledit moyen d'autorisation des transactions 
(44) etant arrange pour mettre fin a une transaction 
si ledit compte des transactions suspectes atteint w 
une vaieur de seui! predeterminee 

2. Un systeme conformement a la revendication 1, 
caracterise en ce que ledit moyen d'autorisation 
des transactions (44) est arrange pour permettre a is 
une transaction de se poursuivre si lesdites don- 
nees de sortie biometriques correpondent de facon 
concluante avec lesdites donnees de reference bio- 
metriques, quelle que soit la comparaison entre la 
transaction predite et la transaction demanded. 20 

3. Un systeme conformement a la revendication 2, 
caracterise en ce qu'une premiere vafeur est deri- 
vee, representative de la difference entre lesdites 
donnees de sortie biometriques et lesdites don- 25 
nees de reference biometriques, lesdites donnees 

de sortie etant considerees etre une correspon- 
dance concluante avec lesdites donnees de ref6- 
rence si ladite premiere vaieur est inferieure a une 
vaieur de seuil predeterminee. 30 

4. Un systeme conformement a la revendication 2 ou 
a ia revendication 3, caracterise en ce que, si lesdi- 
tes donnees de sorties biometriques ne correspon- 
dent pas de facon concluante avec lesdites 35 
donnees de reference biometriques mais corres- 
pondent avec lesdites donnees de reference dans 
ladite limite predetermines, et que ladite transac- 
tion demanded n'est pas en accord avec ladite tran- 
saction predite, ledit moyen d'autorisation des 40 
transactions (44) est arrange pour faire en sorte 
que ledit systeme obtienne des informations sup- 
plementaires concernant I'utiiisateur approprie 
avant qu'ii ne soit determine definitivement si Ton 
permet a la transaction d'etre menee a bien. 45 

5. Un systeme conformement a la revendication 4 ( 
caracterise en ce que, au cours d'une transaction, 
une autre utilisation est faite dudit moyen biometri- 
que (40) pour fournir lesdites informations supple- so 
mentaires. 

6 V . Un systeme conformement a la revendication 4, 
caracterise en ce que, au cours d'une transaction, 
I'utilisateur entre un code personnel au moyen dudit 55 
moyen d'entree (16) pour fournir lesdites informa- 
tions supplementaires. 



7. Un systeme conformement a Tune quelconque des 
revendications precedentes, caracterise en ce que 
ledit moyen d'identif ication utilisateur (20) est forme 
par un lecteur de canes pour lire, a partir d'une 
carte, des informations relatives au compte d'un uti- 
lisateur. 

8. Un systeme conformement a Tune quelconque des 
revendications precedentes, caracterise en ce que 
les donnees memoris£es relatives a des transac- 
tions anterieures sont mises a jour a chaque fois 
qu'une transaction est declench^e par I'un desdits 
utilisateurs autorises. 

9. Un systeme conformement a Tune quelconque des 
revendications precedentes, caracterise par un 
prdinateur central (12) et une piuraiite de guichets 
automatiques bancaires (10), chacun comportant 
une unite interface utilisateur (14), un moyen de 
prediction (38) et un moyen d'autorisation (44) 
comme specifie dans la revendication 1 . 
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